S
Sharon
Hi all.
How can i secure socket communications?
Is it possible to use ssl?
Thanks,
Sharon.
How can i secure socket communications?
Is it possible to use ssl?
Thanks,
Sharon.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
?
=?iso-8859-1?Q?Patrik=20L=f6wendahl=20[C#=20MVP]?=
Hello Sharon,
AFIK SSL is limited to HTTP communication, although on an infrastructure
level you could look at IPSec.
AFIK SSL is limited to HTTP communication, although on an infrastructure
level you could look at IPSec.
D
David Hernandez Diez
If you are using .NET Remoting you could use an HTTP Channel and benefit
from the IIS security. You will get "out of the box" security, the
drawbacks are that you will need to istall IIS and host the remote
objects in ASP.NET of course the there is always a drawback: performance.
Here is an article about .net remoting security:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetch11.asp
from the IIS security. You will get "out of the box" security, the
drawbacks are that you will need to istall IIS and host the remote
objects in ASP.NET of course the there is always a drawback: performance.
Here is an article about .net remoting security:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetch11.asp
S
Sharon
Thanks for your reply David.
This means that with every installation of my server, i will have to install
IIS,
and possibly a certificate.
I guess i can use IIS only in the login phase, and send back a secret key,
which
will be used to encrypt further socket communications.
But i will use this option only as a last resort.
Regards,
Sharon.
This means that with every installation of my server, i will have to install
IIS,
and possibly a certificate.
I guess i can use IIS only in the login phase, and send back a secret key,
which
will be used to encrypt further socket communications.
But i will use this option only as a last resort.
Regards,
Sharon.
M
Markus Stoeger
Patrik said:Hello Sharon,
AFIK SSL is limited to HTTP communication, although on an infrastructure
level you could look at IPSec.
SSL is not limited to HTTP communication, it can be used with anything
that runs over TCP.
The OpenSSL page links to a page where openssl binaries for windows can
be downloaded: http://www.openssl.org/related/binaries.html
I can't find any official OpenSSL libs for .NET. I guess it should be
easy to write a .NET wrapper around that though. Someone on codeproject
seems to have done that already:
http://www.codeproject.com/managedcpp/sslclasses.asp
Strange that there aren't any official/trustworthy .NET wrappers for
openssl yet.
hth,
Max
N
Nicholas Paldino [.NET/C# MVP]
It should be noted that in .NET 2.0, you can use the SslStream class to
perform SSL communications.
perform SSL communications.
N
Nicholas Paldino [.NET/C# MVP]
This won't work, since you can not decouple a good deal of the
infrastructure of ASP/ASP.NET from IIS.
In .NET 2.0, you should take a look at the SslStream class, as it will
do what you are looking for.
Hope this helps.
infrastructure of ASP/ASP.NET from IIS.
In .NET 2.0, you should take a look at the SslStream class, as it will
do what you are looking for.
Hope this helps.
J
Jay R. Wren
Nicholas said:This won't work, since you can not decouple a good deal of the
infrastructure of ASP/ASP.NET from IIS.
In .NET 2.0, you should take a look at the SslStream class, as it will
do what you are looking for.
Hope this helps.
I'm not sure about all of ASP.NET, but Web Services can be hosted
outside of IIS using pure .NET.
http://msdn.microsoft.com/msdnmag/issues/04/12/ServiceStation/
Coupled with SslStream, you may be able to run your own https:// web
service.
S
Sharon
Hosting a web service could work.
I'm also looking into HttpListener class.
Thanks.
I'm also looking into HttpListener class.
Thanks.